H3C S5100-SI Series Operation Manual page 327

Operation Manual – AAA
H3C S5100-SI/EI Series Ethernet Switches
adopts the following mechanisms: timer management, retransmission, and backup
server. Figure 1-3
Figure 1-3 RADIUS message format
1) The Code field (one byte) decides the type of RADIUS message, as shown in
Table
Table 1-1 Description on the major values of the Code field
Code
1
2
3
depicts the format of RADIUS messages.
1-1.
Message type
Access-Request
Access-Accept
Access-Reject
Message description
Direction: client->server.
The client transmits this message to the
server to determine if the user can access the
network.
This message carries user information. It
must contain the User-Name attribute and
may contain the following attributes:
NAS-IP-Address, User-Password and
NAS-Port.
Direction: server->client.
The server transmits this message to the
client if all the attribute values carried in the
Access-Request message are acceptable
(that is, the user passes the authentication).
Direction: server->client.
The server transmits this message to the
client if any attribute value carried in the
Access-Request message is unacceptable
(that is, the user fails the authentication).
1-5
Chapter 1 AAA Overview